Update for SharePoint Server 2016 (February 2020 CU)

25.2.2020    |    komentáře   komentářů: 0

A new cumulative update for SharePoint Server 2016 has been released (February 2020 CU).
This CU includes both Feature Pack 2, which has been included since the September CU (September 2017 CU), and the previous Feature Pack 1.

SP Build:
16.0.4966.1000 (Language independent CU)
16.0.4966.1000 (Language dependent CU)

SharePoint 2016 CU – KB articles describing the CU:

  • KB 4484255 – February 2020 Update for SharePoint Server 2016 (language independent)
  • KB 4484257 – February 2020 Update for SharePoint Server 2016 (language dependent)

SharePoint Server 2016 CU – CU download link:

After installation, remember to run the SharePoint 2016 Products Configuration Wizard (SharePoint 2016 Products Configuration Wizard), or the following command:
PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Notice

Feature Pack 2 also includes all functionality from Feature Pack 1.

Always install both packages in this order:

  1. language independent (updates language-independent components)
  2. language dependent (updates language-dependent components)

For language-dependent packages, it does not matter which language you select, as each package contains updates for all languages.

If you install a new language pack on your SharePoint Server 2016 farm, you must then reinstall the language-dependent update package.

Remember that Distributed Cache must also be updated alongside SharePoint; see How to update Distributed Cache correctly and for Office Online Server, you must have the current RTM release; see  How to update Office Online Server.

Included fixes and improvements

The fixes and improvements listed for this CU are excerpts from official Microsoft KB articles in their original language (EN).

SharePoint Server 2016

This security update resolves a cross-site-scripting (XSS) vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn more about the vulnerability see Microsoft Common Vulnerabilities and Exposures CVE-2020-0693 and Microsoft Common Vulnerabilities and Exposures CVE-2020-0694.
This security update contains improvements and fixes for the following nonsecurity issues in SharePoint Server 2016:

  • SharePoint Hybrid Auditing (preview) is deprecated. The Hybrid Auditing documentation link is now removed from the SharePoint Central Administration page.
  • The Dutch word breaker unexpectedly breaks the names “Anneleen” and “Kathleen” into compound words. This causes search errors.
  • When you upgrade a SharePoint Server 2013 site to SharePoint Server 2016, if the site uses a Serbian language pack and runs workflows that are configured to use the Workflows site collection feature, the in-progress workflows no longer work. This update fixes the problem. To make the workflows work, toggle the Workflows feature off and then on again after you apply this update.
  • Fixes an issue in which you can’t open the Compliance dialog box by selecting the Compliance Details entry from the ellipsis menu.
  • Fixes an issue that causes SharePoint mobile view to fail if there is no User Profile Application (UPA) service application or My Site that is associated with the web application.

This security update contains fixes for the following nonsecurity issues in Project Server 2016:

  • You receive the following error message when you save or submit a timesheet that has has a newly locked task:

“An error occurred while communicating with the server. Check connectivity with your administrator to determine whether further action is necessary.”

  • Consider the following scenario:
    • You have server event code on the publishing event that extracts data from a project through the client-side object model (CSOM).
    • You open a project by using Project or Project Web App.
    • You make changes in the project.
    • You publish the project.

In this scenario, the publishing event code that reads the project data runs for more than a minute and then times out. As a result, the event unexpectedly cancels the publishing job.

SharePoint Hybrid Auditing (preview) is deprecated. The Hybrid Auditing documentation link is now removed from the SharePoint Central Administration page.

Komentáře